Important
Action required
- If you accept DPoP-bound tokens, call
enforceDpopBindingfrombetter-auth/oauth2in your endpoint with the request and a shared replay store. (#12498)
better-auth
Bug Fixes
- Improved verification lookups to delete expired rows at most once a minute per server instance instead of on every lookup (#12593)
For detailed changes, see CHANGELOG
@better-auth/oauth-provider
Bug Fixes
- Clarified that
requireActiveAccessTokenchecks only the token and does not enforce DPoP binding (#12498) - Fixed plugin hook and endpoint errors turning into generic 500 responses when an app installs more than one copy of
better-call(#12503) - Fixed official packages to accept any
better-call1.4 patch release from 1.4.5 as a peer, so plugins share one copy (#12502) - Fixed OAuth provider discovery to stop advertising endpoint URLs with a double slash when
baseURLends in/(#12598)
For detailed changes, see CHANGELOG
@better-auth/cimd
Bug Fixes
- Fixed plugin hook and endpoint errors turning into generic 500 responses when an app installs more than one copy of
better-call(#12503) - Fixed official packages to accept any
better-call1.4 patch release from 1.4.5 as a peer, so plugins share one copy (#12502)
For detailed changes, see CHANGELOG
@better-auth/passkey
Bug Fixes
- Fixed plugin hook and endpoint errors turning into generic 500 responses when an app installs more than one copy of
better-call(#12503) - Fixed official packages to accept any
better-call1.4 patch release from 1.4.5 as a peer, so plugins share one copy (#12502)
For detailed changes, see CHANGELOG
@better-auth/scim
Bug Fixes
- Fixed plugin hook and endpoint errors turning into generic 500 responses when an app installs more than one copy of
better-call(#12503) - Fixed official packages to accept any
better-call1.4 patch release from 1.4.5 as a peer, so plugins share one copy (#12502)
For detailed changes, see CHANGELOG
@better-auth/sso
Bug Fixes
- Fixed plugin hook and endpoint errors turning into generic 500 responses when an app installs more than one copy of
better-call(#12503) - Fixed official packages to accept any
better-call1.4 patch release from 1.4.5 as a peer, so plugins share one copy (#12502)
For detailed changes, see CHANGELOG
@better-auth/stripe
Bug Fixes
- Fixed plugin hook and endpoint errors turning into generic 500 responses when an app installs more than one copy of
better-call(#12503) - Fixed official packages to accept any
better-call1.4 patch release from 1.4.5 as a peer, so plugins share one copy (#12502)
For detailed changes, see CHANGELOG
@better-auth/api-key
Bug Fixes
- Fixed official packages to accept any
better-call1.4 patch release from 1.4.5 as a peer, so plugins share one copy (#12502)
For detailed changes, see CHANGELOG
@better-auth/core
Bug Fixes
- Fixed official packages to accept any
better-call1.4 patch release from 1.4.5 as a peer, so plugins share one copy (#12502)
For detailed changes, see CHANGELOG
@better-auth/electron
Bug Fixes
- Fixed official packages to accept any
better-call1.4 patch release from 1.4.5 as a peer, so plugins share one copy (#12502)
For detailed changes, see CHANGELOG
@better-auth/expo
Bug Fixes
- Fixed
@better-auth/expoto use thebetter-callcopy installed bybetter-authinstead of adding a second copy to Expo apps (#12502)
For detailed changes, see CHANGELOG
@better-auth/mcp
Bug Fixes
- Fixed official packages to accept any
better-call1.4 patch release from 1.4.5 as a peer, so plugins share one copy (#12502)
For detailed changes, see CHANGELOG
Contributors
Thanks to everyone who contributed to this release:
Full changelog: v1.7.23...v1.7.24